IMPORTANT: This will NOT happen if you are testing it on a local machine or within the LAN. It only happens if you are connecting through the net, perhaps it requires latency to reproduce. I'm 100% certain of it as I've been consistently reproducing the same results when I switch b/t LAN and the net.
Steps to reproduce:
1.) create a custom session class
2.) in WebApplication override newSession to return your custom session class
3.) put a logger in the contructor of the custom session
4.) with a browser, navigate around the application from an external machine and see the log that you put in step 3 print out indications of your custom session being created every few clicks.
This seems to be happening on the redirect where it appends the ?5 after a url? I'm not sure.